We've been through a good bit in this skill as far as learning about the
different types of cloud infrastructures,
the roles and responsibilities, and lay in the groundwork for us to be able to
move forward in more detailed security planning for these cloud infrastructures
.
But for this challenge, we're going to take into a scenario and see if we can
work our way through it together.
Taking into account the shared responsibilities of the cloud environment that
we're in,
we're being tasked with developing an agreed upon vulnerability and patching
assessment arrangement between us and our cloud provider. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
assessment arrangement between us and our cloud provider.
The conditions behind this are we are utilizing a platform as a service
infrastructure that runs a Microsoft Exchange server.
And that's for our class to be able to connect to a web interface and a
vulnerability notification has been issued addressing Microsoft Exchange and
Microsoft Windows server at the exact same time.
I know, weird, right? Who would be responsible for the deployment of the actual WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
I know, weird, right? Who would be responsible for the deployment of the actual
security patching and the vulnerability assessment along with this?
I wanted to think about this for a second and I've left this, hopefully I'm
pointing the right way this time.
My little handy dandy guide that we had earlier on the screen as we start
working our way through this.